Lucene search
+L

17150 matches found

OpenVAS
OpenVAS
added 2025/01/14 12:00 a.m.15 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2025-1046)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.01493EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/01/14 12:00 a.m.6 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2025-1014)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS7.7AI score0.0142EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/01/14 12:00 a.m.7 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2025-1031)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS7.7AI score0.0142EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/01/13 12:00 a.m.23 views

EulerOS 2.0 SP10 : ruby (EulerOS-SA-2025-1014)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header an...

8.7CVSS7.6AI score0.0142EPSS
SaveExploits0References3
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.102 views

CVE-2023-22795 affecting package ruby 2.6.10-1

CVE-2023-22795 affecting package ruby 2.6.10-1. This CVE either no longer is or was never applicable...

7.5CVSS7.5AI score0.02278EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/01/11 12:20 a.m.8 views

SUSE CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

7.4CVSS6.8AI score0.00649EPSS
SaveExploits0References3
Redos
Redos
added 2025/01/10 12:00 a.m.10 views

ROS-20250110-11

A vulnerability in the Action Pack framework of the Ruby on Rails software platform is related to incorrect validation of the of input data. Exploitation of the vulnerability could allow a remote attacker to bypass certain security restrictions. certain security restrictions...

9.8CVSS6.9AI score0.00658EPSS
SaveExploits0
NVD
NVD
added 2025/01/09 4:15 a.m.18 views

CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

7.4CVSS0.00649EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/09 4:15 a.m.5 views

DEBIAN-CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

7.4CVSS7.2AI score0.00649EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/09 4:15 a.m.16 views

CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

6.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2025/01/09 4:15 a.m.7 views

CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

7.4CVSS7.1AI score0.00649EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/09 4:15 a.m.9 views

UBUNTU-CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

7.4CVSS5.7AI score0.00649EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/01/09 4:05 a.m.133 views

CVE-2025-0306 Ruby: openssl: ruby marvin attack

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

7.4CVSS7AI score0.00649EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/09 4:05 a.m.137 views

CVE-2025-0306

CVE-2025-0306 concerns the Ruby interpreter and a Marvin Attack that can decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service. The connected docs corroborate Ruby advisories for EulerOS (ruby package security advisories Eul...

7.4CVSS7.3AI score0.00649EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/01/09 4:05 a.m.52 views

CVE-2025-0306 Ruby: openssl: ruby marvin attack

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

7.4CVSS0.00649EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/01/09 4:05 a.m.95 views

CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

7.4CVSS7.2AI score0.00649EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.40 views

Ruby 安全漏洞

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the personal developer Yukihiro Matsumoto. A security vulnerability exists in Ruby that stems from vulnerability to the Marvin attack, which allows an attacker to decrypt previously encrypted messages or forge...

7.4CVSS7.2AI score0.00649EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.10 views

Kredis 安全漏洞

Kredis is a Ruby on Rails open source higher level data structure built on Redis. A security vulnerability exists in Kredis versions prior to 1.3.0.1, which stems from the presence of an untrusted data deserialization vulnerability...

5.3CVSS5.3AI score0.00527EPSS
SaveExploits0References1
Redos
Redos
added 2025/01/09 12:00 a.m.22 views

ROS-20250109-08

The ungetbyte and ungetc methods of StringIO string handler for Ruby programming language are vulnerable to with an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of protected information...

9.8CVSS6.9AI score0.02364EPSS
SaveExploits0
Redos
Redos
added 2025/01/09 12:00 a.m.9 views

ROS-20250109-06

The ungetbyte and ungetc methods of StringIO string handler for Ruby programming language are vulnerable to with an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of protected information...

8.8CVSS7.2AI score0.7066EPSS
SaveExploits19
Rows per page
Query Builder